Seguridad

// MAL - API key expuesta en el frontend
const response = await fetch('/api/payment', {
  headers: { 'Authorization': 'Bearer vp_live_abc123' } // NO HAGAS ESTO
});

// BIEN - Llamada a tu propio backend
const response = await fetch('/api/payment', {
  method: 'POST',
  body: JSON.stringify({ amount: 50 })
});
// Tu backend usa la API key de forma segura

# .env.development
VENEPAGOS_API_KEY=vp_test_abc123

# .env.production
VENEPAGOS_API_KEY=vp_live_xyz789

curl -X POST https://api.venepagos.com.ve/api/v1/bank/transfer \
  -H "Authorization: Bearer TU_API_KEY" \
  -H "Idempotency-Key: unique-key-12345" \
  -H "Content-Type: application/json" \
  -d '{
    "account_number": "01020000000000000000",
    "destination_bank": "0102",
    "destination_account": "01340000000000000000",
    "amount": 100.00
  }'